CVE-2026-64336

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An information leak exists in the USB serial keyspan pda implementation. The write() callback is intended to return the number of characters accepted or a negative errno. However, with write fifo support, the implementation may return the number of characters submitted to the device when the write urb is not in use. If this returned value exceeds the number of characters passed to write(), the line discipline continues writing data from beyond the tty write buffer, leading to the leak of sensitive information. This occurs within the keyspan pda write start() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.